produce spam from Microsoft
Posted by Dave Yadallee onEnvelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Thu, 28 Apr 2022 05:15:05 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from
id 1nk26S-000M5z-Mw
for dave@doctor.nl2k.ab.ca;
Thu, 28 Apr 2022 05:14:32 -0600
Resent-From: The Doctor
Resent-Date: Thu, 28 Apr 2022 05:14:32 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from [220.161.202.238] (port=64889 helo=streetfootballworld-org.mail.protection.outlook.com)
by doctor.nl2k.ab.ca with esmtp (Exim 4.95 (FreeBSD))
(envelope-from
id 1njxbk-000CE5-MV
for root@nk.ca;
Thu, 28 Apr 2022 00:26:38 -0600
Date: Thu, 28 Apr 2022 14:25:31 +0800 (CST)
From: langshebing
Sender: vnoqyoq
To: root
Message-ID: <1627292430.299279.1651127131226@streetfootballworld-org.mail.protection.outlook.com>
Subject: RE: Instant tea powder
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Spam_score: 11.5
X-Spam_score_int: 115
X-Spam_bar: +++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Dear Sir or Madam, How are you? Hope this mail finds you well.
This is Ruby from Fujian Xian Yang Yang Biotechnology Co., Ltd. I'm sorry
to take the libery of sending this email firstly. I learned from your official
website that you are doing beverages. So we may [...]
Content analysis details: (11.5 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.3 RCVD_IN_VALIDITY_RPBL RBL: Relay in Validity RPBL,
https://senderscore.org/blocklistlookup/
[220.161.202.238 listed in bl.score.senderscore.com]
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
0.9 SPF_FAIL SPF: sender does not match SPF record (fail)
[SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=vnoqyoq%40chemborun.com;ip=220.161.202.238;r=doctor.nl2k.ab.ca]
0.0 T_SPF_HELO_TEMPERROR SPF: test of HELO record failed (temperror)
0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level
mail domains are different
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[langshebing[at]163.com]
1.7 DEAR_SOMETHING BODY: Contains 'Dear (something)'
1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 T_KAM_HTML_FONT_INVALID BODY: Test for Invalidly Named or
Formatted Colors in HTML
-0.0 T_SCC_BODY_TEXT_LINE No description available.
0.2 FREEMAIL_FORGED_FROMDOMAIN 2nd level domains in From and
EnvelopeFrom freemail headers are
different
1.3 RDNS_NONE Delivered to internal network by a host with no rDNS
0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML
tag
1.0 PDS_HP_HELO_NORDNS High profile HELO with no sender rDNS
0.0 SPOOFED_FREEMAIL_NO_RDNS From SPOOFED_FREEMAIL and no rDNS
2.0 SPOOFED_FREEMAIL No description available.
Subject: {SPAM?} RE: Instant tea powder
arial, helvetica, sans-serif; font-size: 14px;">Dear Sir or Madam,
p>
: arial, helvetica, sans-serif; font-size: 14px;">
=3D"margin-top:2px;margin-bottom:2px;">
elvetica, sans-serif; font-size: 14px;">How are you? Hope this mail finds y=
ou well.
arial, helvetica, sans-serif; font-size: 14px;">This is Ruby from Fujian Xi=
an Yang Yang Biotechnology Co., Ltd. I'm sorry to take the libery of se=
nding this email firstly. I learned from your official website that you are=
doing beverages. So we may have the chance to cooperate.
e=3D"margin-top:2px;margin-bottom:2px;">
helvetica, sans-serif; font-size: 14px;">
-top:2px;margin-bottom:2px;">
sans-serif; font-size: 14px;">Let me introduce ourself briefly: we are a pr=
ofessional manufacturer of instant tea powder, tea concentrate and plant ex=
tract for beverages with 20 years experiences in China.
=3D"margin-top:2px;margin-bottom:2px;">
elvetica, sans-serif; font-size: 14px;">Up to know, we have some stable cus=
tomers, such as Suntory, Arizona, Quala.
px;margin-bottom:2px;">
x;">
px;">If you have any project that need our products , pls contact me freely=
.
">
an style=3D"font-family: arial, helvetica, sans-serif; font-size: 14px;">
r/>
"font-family: arial, helvetica, sans-serif; font-size: 14px;">Have a nice d=
ay.
"font-family: arial, helvetica, sans-serif; font-size: 14px;"> =
amily: arial, helvetica, sans-serif; font-size: 14px;">Best Regards
pan>
nt-family: arial, helvetica, sans-serif; font-size: 14px;">Ruby Huang
>
"margin-top: 2px; margin-bottom: 2px;">
elvetica, sans-serif; font-size: 14px;">
px;margin-bottom:2px;">
erif; font-size: 14px;">TEL:86-15880434064
=3D"margin-top:2px;margin-bottom:2px;">
d; font-family: arial, helvetica, sans-serif; font-size: 14px;">Wechat:+86 =
15880434064
style=3D"word-break: break-word; font-family: arial, helvetica, sans-serif;=
font-size: 14px;">QQ:297524190
-bottom:2px;">
lvetica, sans-serif; font-size: 14px;">Email:langshebing@163.com=
arial, helvetica, sans-serif; font-size: 14px;">
2px; font-family: Arial; word-break: break-word;">
break-word;"/>
elvetica, sans-serif; word-break: break-word; background-color: transparent=
;">Add: Shugan road 108#,Zhangwan town, Ningde City, Fujian, China.<=
/span>
font-family: arial, helvetica, sans-serif; font-size: 12px;">
r/>
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments